r0otk3r/cve-2024-1212Unauthenticated remote command execution exploit for Progress Kemp LoadMaster CVE-2024-1212. Supports proxy interception and output logging for authorized security testing.
This is an exploit script for CVE-2024-1212, an unauthenticated command injection vulnerability in Progress Kemp LoadMaster.
CVE-2024-1212 affects Progress Kemp LoadMaster, allowing unauthenticated attackers to execute arbitrary commands on the system via a crafted HTTP request to the /access/set endpoint.
User-Agent headers to avoid basic detection-p)-o)python3 cve_2024_1212_exploit.py -u <TARGET_URL> -c <COMMAND>
| Argument | Description |
|---|---|
-u, --url | Target base URL (e.g., http://192.168.1.1) [REQUIRED] |
-c, --command | Command to execute (default: id) |
-p, --proxy | Proxy URL (e.g., http://127.0.0.1:8080) for intercepting traffic |
-o, --output | Save the output to a file (e.g., result.txt) |
python3 cve_2024_1212_exploit.py -u http://192.168.100.1 -c "uname -a" -p http://127.0.0.1:8080 -o output.txt
This script is provided for educational and authorized security testing purposes only.